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DETAILED ACTION 

1 . The Examiner would lil<e to note that the present application has been 
reassigned to a new Examiner. 

2. In the interest of expedited prosecution, the Examiner would like to recommend 
conducting an Interview prior to filing a response to the present Office action. The 
Examiner feels that an interview would help foster a mutual understanding of the 
respective positions of Applicant and the Examiner, and assist in the identification of 
allowable subject matter and/or Issues for appeal. If Applicant agrees that an Interview 
would be beneficial, he/she is encouraged to contact the Examiner to schedule one. 

Response to Arguments 

3. Applicant has provided evidence in this file showing that the Invention was owned 
by, or subject to an obligation of assignment to, the same entity as Baekelmans et al. 
(US 7,080,141) at the time this invention was made, or was subject to a joint research 
agreement at the time this Invention was made. Therefore, the rejections relying on 
Baekelmans have been withdrawn. However, a new grounds of rejection has been set 
forth below. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
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the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1,3-9, 11-15, 17-20, 22, 24-30 and 32-35 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Feridun et al. (US 6,336,139) in view of Muthiyan et 
al. (US 7,328,260). 

6. With regard to claim 1 , Feridun discloses a method for rule-based network 
management, the method comprising the computer-implemented steps of: 

defining and storing a set of rules, wherein the set of rules includes: 

a symptom-event rule that identifies as a symptom a particular event occurring 
within a first network in a plurality of networks (events matching the registration list are 
sent to the correlation engine)(col. 8, II. 15-22); and 

a problem-diagnosis rule that defines a problem within the network as a 
correlation between one or more symptoms (correlation engine contains correlation 
rules that identifies situations based on symptomatic events) (col. 9, II. 1-14); 

collecting and storing symptom-related data about one or more symptoms 
(events are collected in the input queue)(col. 8, II. 15-17), wherein collecting and storing 
the symptom-related data includes monitoring the network for one or more network 
events identified in the symptom-event rule (events are compared to the registration list 
and matching events are forwarded to the correlation engine)(col. 8, II. 15-22); and 
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detecting a problem witliin tine networl^, wlierein detecting the problem includes 
applying the problem-diagnosis rule to the symptom-related data (correlated events may 
be used to detect situations, including problems)(col. 9, II. 5-14 and 41-47); 

receiving a request from a user to employ a particular rule in managing a second 
network, separate from the first network (system is used to manage a large distributed 
environment comprising a plurality of networks, each with its own management 
server)(col. 4, II. 10-24); and 

distributing, to a device on the second network, the particular rule (managing the 
second network will necessarily require distributing the rules to nodes on the second 
network). 

Feridun fails to specifically disclose that the rules are stored in one or more Rule- 
Based Markup Language documents including tags for defining the rule elements. 

Muthiyan discloses a similar system for monitoring a network based on a plurality 
of rules (Abstract). Muthiyan teaches storing the rules in Rule-Based Markup Language 
(XML) file including tags for defining the rule elements (col. 48, II. 23-67). This would 
have been an advantageous addition to the system disclosed by Feridun since it would 
have allowed the rules to be edited using a standard text editor (Muthiyan; col. 12, II. 15- 
19) , eliminating the need for specialized editors to change or view the current rules. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to store the Feridun's rules in a Rule-Based Markup 
Language file to permit the rules to be easily viewed and edited using standard text 
editors. 
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7. With regard to claim 3, Feridun furtlier teaclies and/or suggests storing tine rules 
in a rule repository, wherein the rule repository includes one or more directories 
containing the rule documents (rules are stored in the registration list containing a 
directory of rules Indicating interest in a particular event; Rules are also stored in the 
event correlator)(col. 8, II. 15-22; col. 9, II. 1-14). 

8. With regard to claim 4, Feridun, when considered in combination with Muthiyan's 
teaching of XML rule files, further teaches and/or suggests: 

a problem-definition tag describing a problem (identification of the "situation") 
(col. 9, 11.9-11); and 

a correlation tag identifying the correlation between one or more symptoms, 
wherein the one or more symptoms are defined in one or more symptom tags that 
include one or more pre-defined indicators associated with the one or more symptoms 
(correlation rules identify a problem [situation] based on a series of symptomatic events 
occurring)(col. 9, II. 41-47). 

9. With regard to claim 5, Feridun further teaches and/or suggests that the step of 
detecting a problem within the network further comprises the steps of: 

comparing the symptom-related data to the one or more pre-defined indicators 
associated with a particular symptom to determine whether the particular symptom 
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exists in the symptom-related data (a first rule is applied to an event stream)(col. 9, 11. 
42-45); 

repeating the step of comparing the symptom-related data for all symptoms 
identified in the correlation tag of the RBML document storing the problem-diagnosis 
rule (a second rule is applied to a second event stream)(col. 9, II. 45-46); and 

only if all symptoms identified in the correlation tag exist, determining that the 
problem identified in the problem-definition tag is detected (if both rules are satisfied, 
the situation defined by the correlation rule has occurred, and appropriate action is 
taken)(col. 9, II. 52-57). 

10. With regard to claim 6, Feridun, when considered in combination with Muthiyan's 
teaching of XML rule files, further teaches and/or suggests: 

an event tag identifying the particular event occurring on the network (incoming 
events are identified and sent to the input queue)(col. 8, II. 15-22); and 

a symptom tag identifying a symptom as a generalized abstraction of the 
particular event (particular events are sent to the correlation engine if they match an 
entry in the registration list)(col. 8, II. 19-22). 

1 1 . With regard to claim 7, Feridun, when considered in combination with Muthiyan's 
teaching of XML rule files, further teaches and/or suggests: 

a profile tag identifying a particular network device; and 



Application/Control Number: 1 0/71 4,1 58 Page 7 

Art Unit: 2153 

a command tag identifying a data-collection command, wherein the data 
collection command, when executed on the particular network device, returns symptom 
related data associated with the particular network device (distributed monitors may 
execution data collection commands in response to status requests)(col. 7, II. 50-56). 

12. With regard to claim 8, Fehdun further teaches and/or suggests that 

the set of rules further includes a problem-correction rule defining one or more 
corrective actions capable of correcting the problem within the network; and 

the method further comprises the step of recommending to a user one or more 
corrective actions defined in a RBML document storing the problem-correction rule 
(actions are triggered in response to identification of a problem)(col. 9, II. 41-57). 

1 3. With regard to claim 9, Ferldun further teaches and/or suggests applying to a 
network device, without user intervention, one or more corrective actions defined In the 
problem-correction rule (i.e., issuing an event to a network node or starting a new 
software agent)(col. 9, II. 54-57). 

14. Claims 1 1 -1 5, 1 7-20, 22, 24-30 and 32-35 are rejected under the same rationale 
as claims 1 and 3-9, since they recite substantially identical subject matter. Any 
differences between the claims do not result in patentably distinct claims and all of the 
limitations are taught by the above cited art. 
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15. Claims 2, 16 and 23 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Feridun et al. (US 6,336,139) in view of Muthiyan et al. (US 7,328,260) further in 
view of Official Notice. 

16. With regard to claim 2, while the system disclosed by Feridun and Muthiyan 
shows substantial features of the claimed invention (discussed above), it fails to 
disclose reviewing the set of rules to identify and resolve a conflict between two or more 
rules in the set. 

The Examiner takes Official Notice that reviewing rule sets to identify and resolve 
conflicts in old and well known in the art. The advantages of doing so, such as ensuring 
that the rules behave in the expected manner by eliminating conflicting actions, would 
have been apparent to one of ordinary skill in the art. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to review the rules to identify and resolve any conflicts 
between rules. 

1 7. Claims 1 6 and 23 are rejected under the same rationale as claim 2, since they 
recite substantially identical subject matter. Any differences between the claims do not 
result in patentably distinct claims and all of the limitations are taught by the above cited 
art. 
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Conclusion 

1 8. Any inquiry concerning this communication or earlier communications from tine 
examiner should be directed to AARON STRANGE whose telephone number is 
(571)272-3959. The examiner can normally be reached on M-F 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Glen Burgess can be reached on 571-272-3949. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Aaron Strange/ 
Examiner, Art Unit 2153 



